检索结果-内蒙古大学图书馆

context-based access control Systems for Mobile Devices

IEEE TRANSACTIONS ON DEPENDABLE AND SECURE COMPUTING 2015年第2期12卷 150-163页

作者： Shebaro, Bilal Oluwatimi, Oyindamola Bertino, Elisa Purdue Univ Dept Comp Sci Cyber Ctr W Lafayette IN 47907 USA Purdue Univ CERIAS W Lafayette IN 47907 USA

Mobile Android applications often have access to sensitive data and resources on the user device. Misuse of this data by malicious applications may result in privacy breaches and sensitive data leakage. An example would be a malicious application surreptitiously recording a confidential business conversation. The problem arises from the fact that Android users do not have control over the application capabilities once the applications have been granted the requested privileges upon installation. In many cases, however, whether an application may get a privilege depends on the specific user context and thus we need a context-based access control mechanism by which privileges can be dynamically granted or revoked to applications based on the specific context of the user. In this paper we propose such an access control mechanism. Our implementation of context differentiates between closely located subareas within the same location. We have modified the Android operating system so that context-based access control restrictions can be specified and enforced. We have performed several experiments to assess the efficiency of our access control mechanism and the accuracy of context detection.

关键词： context-based access control smartphone devices security and privacy policies mobile applications

来源：评论

学校读者我要写书评

暂无评论

CoDRA: context-based dynamically reconfigurable access control system for android

引用

JOURNAL OF NETWORK AND COMPUTER APPLICATIONS 2018年 101卷 1-17页

作者： Thanigaivelan, Nanda Kumar Nigussie, Ethiopia Hakkala, Antti Virtanen, Seppo Isoaho, Jouni Univ Turku Dept Future Technol Turku Finland

We present, CoDRA, an access control system for Android that offers context-based dynamically configurable restrictions, fine-granular policy and ability to enforce various policy configurations at different levels of system operation. The fine grained policy and policy diversification are achieved through the application of context based on resource features. Policies are established and classified, as system-wide and application-wise, after careful examination on application activities. The dynamic generation and enforcement of policies enables greater protection for open resources, e.g., sensors. CoDRA enforces different policy configuration on user basis through its integration of multiuser support in Android. A simple graphical control panel is provided for policy administration. CoDRA performance and overhead were analysed by testing 55 popular applications in Nexus 5 and 9 devices. The results proved that CoDRA successfully fulfilled its objectives by introducing 1-20 ms executional overhead. It occupied about 800kB memory for policy storage and 5kB of memory for every additional user context space. The evaluation also proved that the tested applications did not exhibit any adverse effects during execution even with full restriction, and higher granularity in policies.

关键词： context-based access control Android Mobile security Dynamic policy configuration Fine-grained policy

来源：评论

学校读者我要写书评

暂无评论

A Semantic-Aware context-based access control Framework for Mobile Web Services

引用

International Conference on Mechanical Engineering and Intelligent Systems (ICMEIS 2012)

作者： Shen, Haibo Cheng, Yu Hubei Univ Technol Sch Comp Wuhan 430068 Peoples R China

ISBN: (纸本)9783037854693

As computing technology becomes more pervasive and mobile services are deployed, applications will need flexible access control mechanisms. Unlike traditional approaches based on the identity/role for access control, access decisions for these applications will depend on the combination of the required attributes of users and the contextual information. This paper proposes a semantic-aware context-based access control framework (called SA_CBAC) to be applied in mobile web services environment by combining semantic web technologies with context-based access control mechanism. In order to handle context information in the framework, this paper proposes a context ontology to represent contextual information and employ it in the inference engine. This paper also focuses on access control policies and addresses these issues by representing context, user attributes and resource attributes in knowledge base and extending XACML to incorporate the knowledge base.

关键词： mobile web services semantic-aware context-based access control ontology XACML

来源：评论

学校读者我要写书评

暂无评论

context-based Monitor Framework for Sensors access in Smartphone 3

Context-based Monitor Framework for Sensors Access in Smartp...

引用

3rd IEEE International Conference on Progress in Informatcs and Computing (IEEE PIC)

作者： Dai, Jiazhu Chen, Junyan Shanghai Univ Sch Comp Engn & Sci Shanghai Peoples R China

ISBN: (纸本)9781467390880

Smartphone have more and more sensors which have given a wealth of experiences to users. In Android system, once one application is granted permissions to access sensors, its behavior is not monitored any more. Some malicious applications make use of this vulnerability to steal privacy. For example, a malicious program named "Eavesdropping thieves" can obtain the microphone access permission to open the microphone covertly to record users' calls and transmits them to hackers' mailboxes. Existed methods are not acceptable to solve this privacy leakage threat very well. A monitor framework for sensors access in smartphone has been proposed The framework monitors applications accessing sensors and adjusts the applications' access capabilities according to the context automatically. The prototype has showed that the framework can prevent privacy leakage through sensors and achieve better security in smartphone.

关键词： context-based access control sensor privacy android policies

来源：评论

学校读者我要写书评

暂无评论

context-based Monitor Framework for Sensors access in Smartphone

Context-based Monitor Framework for Sensors Access in Smartp...

引用

2015 IEEE International Conference on Progress in Informatics and Computing(PIC 2015)

作者： Jiazhu Dai Junyan Chen School of Computer Engineering and Science Shanghai University

Smartphone have more and more sensors which have given a wealth of experiences to users. In Android system, once one application is granted permissions to access sensors, its behavior is not monitored any more. Some malicious applications make use of this vulnerability to steal privacy. For example, a malicious program named "Eavesdropping thieves" can obtain the microphone access permission to open the microphone covertly to record users ' calls and transmits them to hackers ' mailboxes. Existed methods are not acceptable to solve this privacy leakage threat very well. A monitor frame work for sensors access in smartphone has been proposed. The framework monitors applications accessing sensors and adjusts the applications' access capabilities according to the context automatically. The prototype has showed that the framework can prevent privacy leakage through sensors and achieve better security in smartphone.

关键词： context-based access control sensor privacy android policies

来源：评论

学校读者我要写书评

暂无评论

context-Aware Role-based access control in Pervasive Computing Systems 08

Context-Aware Role-based Access Control in Pervasive Computi...

引用

13th ACM Symposium on access control Models and Technologies

作者： Kulkarni, Devdatta Tripathi, Anand Univ Minnesota Dept Comp Sci St Paul MN 55455 USA

ISBN: (纸本)9781605581293

In this paper we present a context-aware RBAC (CA-RBAC) model for pervasive computing applications. The design of this model has been guided by the context-based access control requirements of such applications. These requirements are related to users' memberships in roles, permission executions by role members, and context-based dynamic integration of services in the environment with an application. context information is used in role admission policies, in policies related to permission executions by role members, and in policies related to accessing of dynamically interfaced services by role members. The dynamic nature of context information requires model-level support for revocations of role memberships and permission activations when certain context conditions fail to hold. based on this model we present a programming framework for building context-aware applications, providing mechanisms for specifying and enforcing context-based access control requirements.

关键词： context-Aware Computing Pervasive Computing context-based access control RBAC

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：